55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill mostly matches its stated purpose (an agent-side security suite) but contains several surprising or intrusive behaviors — notably install scripts that modify user config to auto-enable plugi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution, suspicious.env_credential_access (+1 more)

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773847872981,
        "_id": "k97d4zr8z9qjv3bd52qky106rd834dqs",
        "changelog": "- Added initial test coverage with new file: `tests\/zeroleaks-pentest.ts`\n- No changes to core functionality or documentation\n- Begin groundwork for automated security regression tests",
        "changelogSource": "auto",
        "createdAt": 1773847872981,
        "parsed": {
            "clawdis": {
                "author": "OpenClaw Security Team"
            }
        },
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "lockdown56",
        "handle": "lockdown56",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/9158712?v=4",
        "kind": "user",
        "linkedUserId": "kn7cyjs9d0tce32d93428phsdh8357w9"
    },
    "ownerHandle": "lockdown56",
    "skill": {
        "_creationTime": 1773847837254,
        "_id": "kd78aa4r56m85kgf3zv010azpd835268",
        "badges": [],
        "createdAt": 1773847837254,
        "displayName": "Openclaw Sec",
        "latestVersionId": "k97d4zr8z9qjv3bd52qky106rd834dqs",
        "ownerUserId": "kn7cyjs9d0tce32d93428phsdh8357w9",
        "slug": "openclaw-sec-plus",
        "stats": {
            "comments": 0,
            "downloads": 43,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "AI Agent Security Suite - Real-time protection against prompt injection, command injection, SSRF, path traversal, secrets exposure, and content policy violat...",
        "tags": {
            "latest": "k97d4zr8z9qjv3bd52qky106rd834dqs"
        },
        "updatedAt": 1774337348467
    }
}